Skip to main content

Antivirus Security

6 CVEs product

Monthly

CVE-2024-23940 Jan 29, 19:15 HIGH POC This Week

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Trend Micro Internet Security Maximum Security Premium Security +2
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2021-43772 Dec 03, 11:15 MEDIUM This Month

Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Trend Micro Internet Security Maximum Security +2
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2018-15363 Aug 30, 19:29 HIGH This Week

An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Information Disclosure Trend Micro Internet Security +3
NVD
CVSS 3.0
7.8
EPSS
0.5%
CVE-2018-10514 Aug 30, 19:29 HIGH This Week

A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Trend Micro Internet Security Maximum Security Premium Security +1
NVD
CVSS 3.0
7.8
EPSS
0.4%
CVE-2018-10513 Aug 30, 19:29 HIGH This Week

A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Deserialization Trend Micro Internet Security Maximum Security +2
NVD
CVSS 3.0
7.8
EPSS
0.8%
CVE-2018-3608 Jul 06, 19:29 CRITICAL Act Now

A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Trend Micro Code Injection Internet Security Officescan +4
NVD
CVSS 3.0
9.8
EPSS
3.4%
EPSS 1% CVSS 7.8
HIGH POC This Week

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Trend Micro Internet Security +4
NVD
EPSS 0% CVSS 5.5
MEDIUM This Month

Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Trend Micro +4
NVD
EPSS 0% CVSS 7.8
HIGH This Week

An Out-of-Bounds Read Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Information Disclosure +5
NVD
EPSS 0% CVSS 7.8
HIGH This Week

A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Trend Micro Internet Security +3
NVD
EPSS 1% CVSS 7.8
HIGH This Week

A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Deserialization Trend Micro +4
NVD
EPSS 3% CVSS 9.8
CRITICAL Act Now

A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Trend Micro Code Injection +6
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy